#cisa-kev
19 articles
Across government, technology, enterprise, critical infrastructure, and federal government, ZCyberNews has tracked 19 articles on the CISA KEV catalog between 2026-04-19 and 2026-10-14. Flax Typhoon features among the threat actors tied to these entries. The most severe CVEs include CVE-2015-3306, CVE-2026-20079, and CVE-2026-48907, each rated CVSS 10, alongside CVE-2023-49105 and CVE-2025-39682 at CVSS 9.8. Coverage spans the United states, Global, North america, the EU, and Europe. The severity mix comprises 5 high, 8 critical, and 2 medium items.
HIGHMicrosoft Patches Record 1,413 Flaws, Including Exploited Windows
Microsoft's October 2026 Patch Tuesday fixes 1,413 CVEs, led by CVE-2026-96951 (CVSS 8.8), a Windows Mark of the Web bypass exploited in the wild and added to CISA KEV.
CRITICALCISA Adds ProFTPD CVE-2015-3306 to KEV as Flax Typhoon Exploits Five
CISA set an October 11 federal patch deadline after Flax Typhoon exploited CVE-2015-3306, a CVSS 10.0 ProFTPD flaw, plus four other bugs in its KEV batch.
CISA Flags CVE-2026-102490 Zammad Root Escalation
CISA added CVE-2026-102490 to its KEV catalog: a local privilege flaw in Zammad that lets the zammad service account escalate to root, chainable with CVE-2026-102489.
CRITICALCISA Adds Cisco Catalyst SD-WAN Auth Bypass to KEV
CISA added CVE-2026-76504, a 9.8-CVSS auth bypass in Cisco Catalyst SD-WAN Manager, to its KEV catalog after reports of active exploitation.
CISA Flags CVE-2026-65660 SharePoint Code Injection
CISA added CVE-2026-65660, a network-exploitable SharePoint code injection flaw, to its KEV catalog with a 2026-09-28 federal remediation deadline.
CRITICALCISA Flags CVE-2025-39682 Linux Kernel TLS Flaw as Exploited
CISA added CVE-2025-39682, a 9.8-CVSS Linux kernel TLS receive-path flaw, to its KEV catalog after evidence of active exploitation in the wild.
CISA Adds CVE-2025-39964 Linux Kernel Flaw to KEV
CVE-2025-39964, a race condition in the Linux kernel's AF_ALG socket code, is now in CISA's KEV catalog. Federal agencies must remediate by September 21, 2026.
CISA Flags CVE-2026-42016 in JFrog Artifactory as Exploited
CISA added CVE-2026-42016, a JFrog Artifactory token-scope authorization flaw enabling privilege escalation, to its KEV catalog with a Sept 25 patch deadline.
CRITICALCISA Adds Cisco CVE-2026-20079 With Perfect 10.0 Score to KEV
CISA's KEV catalog now lists CVE-2026-20079, a CVSS 10.0 authentication bypass in Cisco software, alongside exploited Citrix and Fortinet flaws. Federal patch deadline: Sept. 12.
CRITICALCVE-2023-49105: ownCloud Flaw Exploited to Steal Nuclear Research Data
CVE-2023-49105 (CVSS 9.8) added to CISA KEV after Chinese-speaking actor exploited it to steal nuclear research records from a Philippine agency. Patch now.
CRITICALCVE-2026-65400 macOS Flaw Added to CISA KEV, Actively Exploited
CISA added CVE-2026-65400, a 9.8-CVSS macOS authentication bypass, to its KEV catalog on August 18, confirming active exploitation. No patch yet.
HIGHCISA Adds Exploited N-able N-central Flaw to KEV Catalog
CISA adds CVE-2026-18577 (CVSS 8.2) to KEV after active exploitation; incomplete patch for CVE-2026-18556 in N-able N-central. Patch now.
CRITICALCISA Adds Joomla JCE Flaw CVE-2026-48907 to KEV Catalog
CISA warns of active exploitation of CVE-2026-48907, a CVSS 10.0 improper access control flaw in Widget Factory Joomla Content Editor (JCE) allowing unauthenticated PHP code...
HIGHCVE-2026-42271: LiteLLM Flaw Exploited in the Wild, CISA Adds to KEV
CISA added CVE-2026-42271 (CVSS 8.7) to its Known Exploited Vulnerabilities catalog after evidence of active exploitation against BerriAI LiteLLM deployments.
MEDIUMCVE-2026-9082: Drupal Core SQL Injection Bug Added to CISA KEV
CISA added CVE-2026-9082 (CVSS 6.5) to its Known Exploited Vulnerabilities catalog after evidence of active exploitation against all supported Drupal Core versions.
HIGHCVE-2024-57728: SimpleHelp Path Traversal Lets Admins Upload
CISA adds CVE-2024-57728 to Known Exploited Vulnerabilities: SimpleHelp path traversal via zip slip allows admin users to upload arbitrary files and execute code. Due May 8, 2026.
HIGHCVE-2025-2749: Kentico Xperience Path Traversal Under Active Exploit
CISA adds CVE-2025-2749 to KEV catalog: Kentico Xperience path traversal lets authenticated Staging Sync Server upload arbitrary files. Due date for federal agencies: May 4, 2026.
MEDIUMNIST NVD Enrichment Change Creates CVSS Gap for 80% of CVEs
NIST now enriches only 15-20% of CVEs under new policy as of April 2026, leaving 80% without CVSS scores or product mappings.
CRITICALMicrosoft Office Excel Flaw Exploited in Active Attacks
CISA orders federal agencies to patch CVE-2009-0238, a 17-year-old Microsoft Office Excel remote code execution flaw, by April 28, 2026, due to active exploitation.
Stay Updated
Get the latest cybersecurity news delivered to your inbox.